$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa File: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (raw, json) Hash identifier: SfWNeHYlKEHJjQq9z0QaxJLCeo+JKRmDXRkMpUqc0wE= Subject key identifier: 1A:10:F6:78:46:EA:55:2B:0D:D3:6A:68:DA:FC:3E:EB:A1:B0:F4:94 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0D22 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa Signing time: Mon 07 Sep 2026 04:37:10 +0000 ROA not before: Mon 07 Sep 2026 04:37:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38565 IP address blocks: 36.252.0.0/15 maxlen: 23 36.253.19.0/24 maxlen: 24 36.253.24.0/24 maxlen: 24 36.253.26.0/24 maxlen: 24 43.243.96.0/22 maxlen: 24 49.126.0.0/16 maxlen: 20 103.38.196.0/22 maxlen: 24 116.68.208.0/21 maxlen: 24 2400:9500::/32 maxlen: 32 2400:9500:4000::/36 maxlen: 44 2400:9500:4f00::/48 maxlen: 48 2400:9500:6000::/36 maxlen: 44 2400:9500:8000::/36 maxlen: 44 2400:9500:8300::/48 maxlen: 48 2400:9500:c000::/36 maxlen: 44 2400:9500:e000::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3362 (0xd22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Sep 7 04:37:10 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a9e3f76-0245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:84:b2:d7:7b:c0:63:41:18:e6:a2:f7:48: 29:ff:9f:c5:30:46:42:2f:8a:f7:f4:44:18:7e:b5: 78:fa:6d:23:bb:4c:6c:76:1c:d0:38:00:c1:da:11: 70:96:1a:03:2d:31:27:90:dd:0f:91:cb:6b:e7:90: 52:2d:8d:60:1c:90:02:05:60:b8:73:6c:a8:1b:a7: d2:88:a3:bb:08:5e:ae:d3:ca:81:ca:2a:87:70:5a: 90:e0:ba:e0:da:95:bc:ab:f8:9e:11:6d:15:b3:89: 59:a7:a6:60:87:ac:8e:d5:20:aa:44:8c:3f:21:8e: 33:a2:68:d1:16:3b:10:a7:85:58:55:b8:0a:df:d1: 44:9a:d3:93:3a:ff:3c:e8:ce:5b:65:b2:40:f8:26: a2:59:70:5d:5d:0d:85:19:7b:93:60:74:49:1c:6e: b7:43:3b:fe:1a:58:eb:71:bc:43:81:16:ea:9d:77: 95:5f:e0:a1:1a:a1:02:33:d0:65:18:b5:3f:58:57: 1f:42:0a:25:1d:0b:1a:fa:3a:eb:c5:d4:7a:4c:9e: 5e:78:10:98:60:33:6a:bc:4a:cf:07:fc:92:8f:5d: 62:a3:b7:3f:9a:ee:6f:cf:ea:d5:0b:eb:6d:64:a1: 2a:d1:e7:d8:83:70:59:39:bb:95:8c:fa:34:b8:98: 2e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:F6:78:46:EA:55:2B:0D:D3:6A:68:DA:FC:3E:EB:A1:B0:F4:94 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.252.0.0/15 43.243.96.0/22 49.126.0.0/16 103.38.196.0/22 116.68.208.0/21 IPv6: 2400:9500::/32 Signature Algorithm: sha256WithRSAEncryption 3a:7f:7b:80:3e:c0:1b:d9:89:65:9d:c3:64:0f:2b:a9:97:e8: b7:6d:e7:fa:6e:22:08:44:53:c7:27:88:19:61:ac:b9:6d:72: ce:09:a5:46:63:b9:91:6f:1b:d4:70:f8:99:d1:09:18:a4:5e: c6:e7:49:5f:6a:45:03:36:16:37:d8:38:ae:79:f2:57:9b:61: 20:0c:73:4c:73:14:75:7e:d2:32:dc:0a:ac:8f:09:1b:90:75: af:b0:6d:51:3a:92:eb:84:dd:76:8c:0b:1e:9c:ab:be:ea:a1: 5e:44:87:62:91:f2:72:eb:55:0e:e6:fa:0b:d7:30:1a:29:f0: 35:06:c5:b8:1f:27:6e:3d:f4:27:d7:c1:9e:7a:6b:4f:c0:0d: c9:77:f5:cf:c5:5a:0a:65:d0:e7:15:c9:85:b3:ce:14:3a:f2: c2:e0:81:96:ff:ed:bf:4a:e0:84:7f:5e:52:cd:96:89:43:5f: fa:15:4a:ac:aa:97:36:ad:1b:78:4e:82:c1:2f:25:56:0d:59: a7:d3:1a:ba:54:cc:b9:7c:a9:d3:cf:35:4c:18:05:86:f1:e4: 8d:e1:ea:2e:35:f6:22:df:37:cd:41:8a:d8:6b:53:d3:50:3a: 6c:f6:3b:b4:3d:16:8a:fc:59:93:94:c4:ee:d7:c1:b2:25:c4: bc:70:a5:92 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICDSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjYwOTA3MDQzNzEwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTllM2Y3Ni0wMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWmEstd7wGNBGOai90gp/5/FMEZCL4r39EQYfrV4+m0ju0xsdhzQOADB2hFw lhoDLTEnkN0Pkctr55BSLY1gHJACBWC4c2yoG6fSiKO7CF6u08qByiqHcFqQ4Lrg 2pW8q/ieEW0Vs4lZp6Zgh6yO1SCqRIw/IY4zomjRFjsQp4VYVbgK39FEmtOTOv88 6M5bZbJA+CaiWXBdXQ2FGXuTYHRJHG63Qzv+GljrcbxDgRbqnXeVX+ChGqECM9Bl GLU/WFcfQgolHQsa+jrrxdR6TJ5eeBCYYDNqvErPB/ySj11io7c/mu5vz+rVC+tt ZKEq0efYg3BZObuVjPo0uJguaQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFBoQ9nhG 6lUrDdNqaNr8PuuhsPSUMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM5NjYvQTE5NTJCQTIxQzExMTFFQUI2QzNDNzZEQzRGOUFFMDIvQTZBNTNGQTJE NjdFMTFFRUFBMkNBMjE4QzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAi BAIAATAcAwMBJPwDBAIr82ADAwAxfgMEAmcmxAMEA3RE0DANBAIAAjAHAwUAJACV ADANBgkqhkiG9w0BAQsFAAOCAQEAOn97gD7AG9mJZZ3DZA8rqZfot23n+m4iCERT xyeIGWGsuW1yzgmlRmO5kW8b1HD4mdEJGKRexudJX2pFAzYWN9g4rnnyV5thIAxz THMUdX7SMtwKrI8JG5B1r7BtUTqS64TddowLHpyrvuqhXkSHYpHycutVDub6C9cw GinwNQbFuB8nbj30J9fBnnprT8ANyXf1z8VaCmXQ5xXJhbPOFDrywuCBlv/tv0rg hH9eUs2WiUNf+hVKrKqXNq0beE6CwS8lVg1Zp9MaulTMuXyp0881TBgFhvHkjeHq LjX2It83zUGK2GtT01A6bPY7tD0WivxZk5TE7tfBsiXEvHClkg== -----END CERTIFICATE-----Generated at Mon Sep 28 03:37:24 2026 by rpki-client